Skip to content
THREATWIRE

CVE Tracker · Vendor

Broadcom CVEs

41 CVEs in the tracker, 5 in the CISA KEV catalogue.

All vendors · RSS feed for Broadcom · Tracker data last updated 18 Oct 2026.

Showing 41 of 41

  1. CVE-2026-94585CVSS 8.8 highEPSS 0.19%2026-10-08

    fabric operating system. An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions b…

  2. CVE-2026-94582CVSS 7.8 highEPSS 0.14%2026-10-08

    fabric operating system. A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used b…

  3. CVE-2026-94579CVSS 8.0 highEPSS 3.10%2026-10-08

    fabric operating system. An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup rou…

  4. CVE-2026-94578CVSS 8.8 highEPSS 0.39%2026-10-08

    fabric operating system. Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authenticat…

  5. CVE-2026-94577CVSS 7.8 highEPSS 0.10%2026-10-08

    fabric operating system. A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handli…

  6. CVE-2026-94576CVSS 8.0 highEPSS 0.43%2026-10-08

    fabric operating system. An authentication logic and privilege escalation vulnerability exists in the account management interface of…

  7. CVE-2026-87687CVSS 7.3 highEPSS 0.21%2026-10-08

    fabric operating system. An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10…

  8. CVE-2026-87684CVSS 9.8 criticalEPSS 0.58%2026-10-08

    fabric operating system. A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric vers…

  9. CVE-2026-87683CVSS 8.8 highEPSS 0.48%2026-10-08

    fabric operating system. Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fa…

  10. CVE-2026-87682CVSS 8.8 highEPSS 1.67%2026-10-08

    fabric operating system. Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routin…

  11. CVE-2026-87680CVSS 8.8 highEPSS 1.91%2026-10-08

    fabric operating system. A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 1…

  12. CVE-2026-87679CVSS 7.2 highEPSS 0.36%2026-10-08

    fabric operating system. When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parse…

  13. CVE-2026-87674CVSS 7.8 highEPSS 0.12%2026-10-08

    fabric operating system. A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions…

  14. CVE-2026-87673CVSS 7.2 highEPSS 1.79%2026-10-08

    fabric operating system. An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabr…

  15. CVE-2026-87671CVSS 7.5 highEPSS 0.40%2026-10-08

    fabric operating system. An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions…

  16. CVE-2026-87666CVSS 8.0 highEPSS 2.57%2026-10-08

    fabric operating system. An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS v…

  17. CVE-2026-87665CVSS 7.5 highEPSS 0.79%2026-10-08

    fabric operating system. A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on B…

  18. CVE-2026-87664CVSS 7.8 highEPSS 0.12%2026-10-08

    fabric operating system. A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2…

  19. CVE-2026-87660CVSS 7.1 highEPSS 0.11%2026-10-08

    fabric operating system. An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module su…

  20. CVE-2026-87659CVSS 9.8 criticalEPSS 0.24%2026-10-08

    fabric operating system. A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS v…

  21. CVE-2026-87428CVSS 7.8 highEPSS <0.1%2026-10-08

    brocade active support connectivity gateway. In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav…

  22. CVE-2026-87424CVSS 8.8 highEPSS 0.19%2026-10-08

    brocade active support connectivity gateway. A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allow…

  23. CVE-2026-85490CVSS 8.8 highEPSS 0.31%2026-10-08

    brocade active support connectivity gateway. When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints,…

  24. CVE-2026-85489CVSS 8.8 highEPSS 0.21%2026-10-08

    brocade active support connectivity gateway. An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthentic…

  25. CVE-2026-85488CVSS 7.8 highEPSS <0.1%2026-10-08

    brocade active support connectivity gateway. Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every…

  26. CVE-2026-85487CVSS 8.8 highEPSS 0.24%2026-10-08

    brocade active support connectivity gateway. A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An…

  27. CVE-2026-85486CVSS 8.0 highEPSS 0.29%2026-10-08

    brocade active support connectivity gateway. Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When a…

  28. CVE-2026-85423CVSS 8.8 highEPSS 0.24%2026-10-08

    brocade active support connectivity gateway. A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An…

  29. CVE-2026-85422CVSS 7.8 highEPSS 0.10%2026-10-08

    brocade active support connectivity gateway. A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic…

  30. CVE-2026-85421CVSS 8.8 highEPSS 0.22%2026-10-08

    brocade active support connectivity gateway. A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS servic…

  31. CVE-2026-5048CVSS 8.0 highEPSS 0.23%2026-10-08

    brocade sannav. In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vu…

  32. CVE-2026-67412CVSS 7.1 highEPSS 0.26%2026-09-25

    rabbitmq server. RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, F…

  33. CVE-2026-67411CVSS 7.1 highEPSS 0.32%2026-09-25

    rabbitmq server. RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, na…

  34. CVE-2026-67410CVSS 7.1 highEPSS 0.35%2026-09-25

    rabbitmq server. RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed…

  35. CVE-2026-67407CVSS 7.1 highEPSS 0.23%2026-09-25

    rabbitmq server. RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incompl…

  36. CVE-2026-67223CVSS 7.1 highEPSS 0.36%2026-09-25

    rabbitmq server. RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3…

  37. CVE-2026-59310CVSS 9.8 criticalEPSS 2.56%KEV2026-07-30

    VMware vCenter. Broadcom VMware vCenter Path Traversal Vulnerability

  38. CVE-2026-22719No CVSSEPSS 18.1%KEV

    VMware Aria Operations. Broadcom VMware Aria Operations Command Injection Vulnerability

  39. CVE-2025-41244No CVSSEPSS 8.44%KEV

    VMware Aria Operations and VMware Tools. Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

  40. CVE-2025-1976No CVSSEPSS 0.69%KEV

    Brocade Fabric OS. Broadcom Brocade Fabric OS Code Injection Vulnerability

  41. CVE-2024-37079No CVSSEPSS 22.4%KEV

    VMware vCenter Server. Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability